IN THE CLAIMS 

Please cancel, without prejudice, Claim 1 . Please add the following Claims as 
shown below: 

1 . (CANCELLED) 

22. (New) A method of processing a query comprising: 

a) accessing said query comprising user identification data, said query 
further comprising an unencrypted portion comprising unencrypted data and an 
encrypted portion comprising an encrypted buffer encrypted using a first 
encryption key, said encrypted buffer also encrypted using a second encryption 
key; 

b) obtaining said second encryption key; 

c) decrypting at least a portion of said encrypted portion using said second 
encryption key; 

d) decrypting said encrypted buffer using said first encryption key; and 

e) determining authentication by comparing said user identification data to 
user identification data contained within said encrypted buffer. 

23. (New) A method as described in Claim 22 comprising, provided 
said user identification data matches said user identification data contained 
within said encrypted buffer, determining authorization using information 
contained within said encrypted buffer. 
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24. (New) A method as described in Claim 22 wherein said b) obtaining 
said second encryption key comprises determining said second encryption key 
using at least a portion of said unencrypted data of said query. 

25. (New) A method as recited in Claim 22 wherein said query further 
comprises a request buffer encrypted with said encryption buffer using said 
second encryption key and wherein said request buffer is decrypted at said c) 
and further comprising transmitting said unencrypted request buffer to a site 
providing service related to said query provided said query is determined to be 
authentic and authorized. 

26. (New) A method as recited in Claim 25 further comprising: 
receiving a response from said site; and 

forwarding said response. 

27. (New) A method as recited in Claim 26 wherein said forwarding 
further comprises: 

encrypting said response; and 
forwarding said response. 
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28. (New) A method as recited in Claim 24 wherein said second 
encryption key is determined using a hash of at least three elements. 

29. (New) A method as recited in Claim 28 wherein said second 
encryption key is determined by a MD-5 hash of said user identification data, a 
randomly generated number and a third encryption key. 

30. (New) A method as recited in Claim 28 wherein said second 
encryption key is determined by a MD-5 hash of said user identification data, a 
randomly generated number and said first encryption key. 

31. (New) A computer system comprising: 
a processor coupled to a bus; 

a memory unit coupled to said bus and comprising instructions that when 
executed by said processor implement a method of processing queries 
comprising: 

a) accessing a query comprising user identification data, said query further 
comprising an unencrypted portion comprising unencrypted data and an 
encrypted portion comprising an encrypted buffer encrypted using a first 
encryption key, said encrypted buffer encrypted using a second encryption key; 

b) obtaining said second encryption key; 
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c) decrypting at least a portion of said encrypted portion of said query 
using said second encryption key; 

d) decrypting said encrypted buffer using said first encryption key; and 

e) determining authentication by comparing said user identification data to 
user identification data contained within said encrypted buffer. 

32. (New) A system as described in Claim 31 wherein said method 
further comprises, provided said user identification data matches said user 
identification data contained within said encrypted buffer, determining 
authorization using information contained within said encrypted buffer. 

33. (New) A system as described in Claim 31 wherein said b) obtaining 
said second encryption key comprises determining said second encryption key 
using at least a portion of said unencrypted data of said query. 

34. (New) A system as recited in Claim 31 wherein said query further 
comprises a request buffer encrypted with said encryption buffer using said 
second encryption key and wherein said request buffer is decrypted at said c) 
and wherein said method further comprises transmitting said unencrypted 
request buffer to a site providing service related to said query provided said 
query is determined to be authentic and authorized. 
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35. (New) A system as recited in Claim 34 wherein said method further 
comprises: 

receiving a response from said site; and 
forwarding said response. 

36. (New) A system as recited in Claim 35 wherein said forwarding 
further comprises: 

encrypting said response; and 
forwarding said response. 

37. (New) A system as recited in Claim 33 wherein said second 
encryption key is determined using a hash of at least three elements. 

38. (New) A system as recited in Claim 37 wherein said second 
encryption key is determined by a MD-5 hash of said user identification data, a 
randomly generated number and a third encryption key. 

39. (New) A system as recited in Claim 37 wherein said second 
encryption key is determined by a MD-5 hash of said user identification data, a 
randomly generated number and said first encryption key. 

40. (New) An apparatus for processing a query comprising: 
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means for accessing said query wherein said query comprises user 
identification data, said query further comprising an unencrypted portion 
comprising unencrypted data and an encrypted portion comprising an encrypted 
buffer encrypted using a first encryption key, said encrypted buffer also 
encrypted using a second encryption key; 

means for obtaining said second encryption key; 

means for decrypting at least a portion of said encrypted portion using 
said second encryption key; 

means for decrypting said encrypted buffer using said first encryption key; 

and 

means for determining authentication by comparing said user identification 
data to user identification data contained within said encrypted buffer. 

41 . (New) An apparatus as described in Claim 40 further comprising 
means for determining authorization using information contained within said 
encrypted buffer provided said user identification data matches said user 
identification data contained within said encrypted buffer. 

42. (New) An apparatus as described in Claim 40 wherein said means 
for obtaining comprises means for determining said second encryption key using 
at least a portion of said unencrypted data of said query. 



Preliminary Amendment 



7 



PALM-3154.PSI.CON 



43. (New) An apparatus as recited in Claim 40 wherein said query 
further comprises a request buffer encrypted with said encryption buffer using 
said second encryption key and further comprising means for transmitting said 
unencrypted request buffer to a site providing service related to said query 
provided said query is determined to be authentic and authorized. 

44. (New) An apparatus as recited in Claim 43 further comprising: 
means for receiving a response from said site; and 

means for forwarding said response. 

45. (New) An apparatus as recited in Claim 44 wherein said means for 
forwarding further comprises: 

means for encrypting said response. 

46. (New) An apparatus as recited in Claim 42 wherein said second 
encryption key is determined using a hash of at least three elements. 

47. (New) An apparatus as recited in Claim 46 wherein said second 
encryption key is determined by a MD-5 hash of said user identification data, a 
randomly generated number and a third encryption key. 
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48. (New) An apparatus as recited in Claim 46 wherein said second 
encryption key is determined by a MD-5 hash of said user identification data, a 
randomly generated number and said first encryption key. 
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